[whatwg] Support for <script crossorigin>